Back to Proxmark3

HF_14BSNIFF — ISO14443B Passive Sniffer

doc/standalone/hf_14bsniff.md

4.92371.5 KB
Original Source

HF_14BSNIFF — ISO14443B Passive Sniffer

Author: jacopo-j Frequency: HF (13.56 MHz) Hardware: RDV4 (flash recommended, optional)

Back to Standalone Modes Index | Source Code | Development Guide


What

Passively sniffs ISO14443B communication between a reader and card, saving captured frames to flash (or RAM).

Why

ISO14443B is used by certain transit cards, national ID cards, and access control systems (e.g., CEPAS, Calypso). This sniffer captures the full communication exchange for protocol analysis.

How

Identical workflow to 14A Sniffer but tuned for the 14443B modulation scheme. Captured frames include both PICC (card) and PCD (reader) traffic.

LED Indicators

LEDMeaning
1 (A)Sniffing active
2 (B)Tag command
3 (C)Reader command
4 (D)Flash unmounting

Button Controls

ActionEffect
Short pressStop sniffing, save to flash, exit

State Machine

mermaid
stateDiagram-v2
    [*] --> Sniffing : Startup

    Sniffing --> SaveToFlash : Button press
    SaveToFlash --> [*] : Saved to hf_14bsniff.trace

Compilation

make clean
make STANDALONE=HF_14BSNIFF -j
./pm3-flash-fullimage